Published: 27/04/2005 Updated: 11/07/2017

CVSS v2 Base Score: 4.6 | Impact Score: 6.4 | Exploitability Score: 3.9

VMScore: 409

Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P

The tpkg-* scripts in the toolchain-source 3.0.4 package on Debian GNU/Linux 3.0 allow local users to overwrite arbitrary files via a symlink attack on temporary files.

Vulnerable Product	Search on Vulmon	Subscribe to Product
debian toolchain-source 3.0.4
debian toolchain-source 3.0.3-1
debian toolchain-source 3.0.3-2
debian toolchain-source 3.0.3-3
debian debian linux 3.0

Sean Finney discovered several insecure temporary file uses in toolchain-source, the GNU binutils and GCC source code and scripts These bugs can lead a local attacker with minimal knowledge to trick the admin into overwriting arbitrary files via a symlink attack The problems exist inside the Debian-specific tpkg-* scripts For the stable distribu ...

NVD-CWE-Other http://www.debian.org/security/2005/dsa-679 http://www.securityfocus.com/bid/12540 http://secunia.com/advisories/14277 https://exchange.xforce.ibmcloud.com/vulnerabilities/19317 https://nvd.nist.gov https://www.debian.org/security/./dsa-679

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2005-0159

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect